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Amendments to the Claims 

This listing of claims will replace all prior version and listings of claims in the 
application: 

Listing of Claims: 

1. (Withdrawn) A method of authenticating an entity by solely conducting message 

authentication by a receiving party with respect to an electronic communication 
that is received by the receiving party and that includes both a unique identifier 
associated with an account maintained by The receiving party and a digital signature 
for a message regarding the account, consisting of the steps of: 

(a) before receipt of the electronic communication, first associating a public 
key of a public-private key pair with the unique identifier by the 
receiving party, and thereafter 

(b) solely using the digital signature in the electronic communication and the 
public key associated with the account identifier to conduct message 
authentication, 

whereby the entity is authenticated solely by the message authentication. 

2. (Currently Amended) A method of operating by a third party a database for accounts, 

information pertaining to each account being retrievable from the database based 
on a unique identifier for that account, comprising the steps of: 
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(a) first associating by the third party a public key of a respective public- 
private key pair with each unique account identifier, and thereafter 

(b) performing entity authentication by the third party with respect to an 
electronic communication that is received by the third party and that 
includes both a unique account identifier and a digital signature for a 
message regarding the account associated with the unique account 
identifier, the entity authentication consisting of s olely conducting 
message authentication only using the digital signature received in 
each electronic communication and the public key associated with 
the unique account identifier accompanying the digital signatur e, and 
without the need for a digital certificate . 

3. (Original) The method of claim 2, wherein the third party is an account authority. 

4. (Original) The method of claim 2, wherein the third party is a financial institution. 

5. (Original) The method of claim 3, wherein one of the public keys associated with an 

account is obtained from an account holder for that account 

6. (Original) The method of claim 3, wherein a public key associated with an account is 

obtained from a manufacturer of a device that generates digital signatures using the 
corresponding private key. 

7. (Original) The method of claim 3, wherein apublic key associated with an account is 

obtained from a distributor of a device that generates digital signatures using the 
corresponding private key. 
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8. (Original) The method of claim 2, wherein said step of associating a public key with a 

unique account identifier comprises recording the public key in a record of the 
account, 

9. (Original) The method of claim 2, wherein said step of associating a public key with a 

unique account identifier comprises indexing a record of the account in an account 
database by the public key. 

1 0. (Original) The method of claim 2, wherein the information includes an account number. 
1 1 .(Original) The method of claim 2, wherein the information includes a current balance, 

12. (Original) The method of claim 2, wherein the information includes an available 

credit. 

13. (Original) The method of claim 2, wherein the information includes a list of associated 

accounts. 

1 4. (Original) The method of claim 2, wherein the information includes a name of an 

account holder. 

15. (Original) The method of claim 2, wherein the information includes an address of an 

account holder. 

16. (Original) The method of claim 2, wherein the information includes a social security 

number of an account holder. 
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17, (Original) The method of claim 2, wherein the information includes a tax identification 

number of an account holder. 

18, (Original) The method of claim 2, wherein the information regards a device containing 

a private key corresponding to the public key. 

19. (Original) The method of claim 2, wherein the information includes security features 

of a device. 

20. (Original) The method of claim 2, wherein a digital signature is generated within a 

device. 

2 1 .(Original) The method of claim 2 0, wherein the device comprises a person al computer. 
22. (Original) The method of claim 20, wherein the device comprises a cell phone. 
23*(Original) The method of claim 20, wherein the device comprises a PDA. 

24. (Origmal) The method of claim 20, wherein the device comprises an electronic key. 

25. (Original) The method of claim 20 7 wherein the device comprises a dongle. 

26. (Original) The method of claim 20, wherein the device comprises a subcutaneous 

device. 

27. (Original) The method of claim 20, wherein the device comprises a secure chip. 



28. (Original) The method of claim 20, wherein the device comprises jewelry. 
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29. (Original) The method of claim 20, wherein the device comprises a smart card. 

30. (Original) The method of claim 20, wherein the device comprises a credit card. 

3 1 . (Original) The method of claim 20, wherein the device comprises a debit card, 

32. (Original) The method of claim 20, wherein the device comprises a security card, 

33. (Original) The method of claim 20, wherein the device comprises an ID badge. 

34. (Original) The method of claim 20, wherein the device performs entity authentication 

based on what the entity using the device to generate the digital signature 
"knows ,T as a function of verification data input into the device and data 
prestored within the device, and communicating a verifications status of the entity 
authentication to the third party without revealing the verification data or the 
prestored data. 

35. (Original) The method of claim 20, wherein the device performs entity authentication 

based on what the entity using the device to generate the digital signature 
"knows" as a function of verification data input into the device and data 
prestored within the device, and communicating to the third party a verifications 
status out of a plurality of predefined verification statuses regarding entity 
authentication, at least one of the verification statuses representing a match 
between the verification data and the prestored data, and at least another of the 
verification statuses representing no match between the verification data and the 
prestored data. 
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36. (Original) The method of claim 20, wherein the device performs entity 

authentication based on what the entity using the device to generate the 
digital signature "is H as a function of verification data input into the device and data 
prestored within the device, and communicating a verifications status of the entity 
authentication to the third party without revealing the verification data or the 
prestored data. 

37. (Original) The method of claim 2, wherein a public-private key pair is generated on behalf 

of the third party. 

38. (Original) The method of claim 2, wherein the public-private key pair is generated on 

behalf of an account holder, and the public key is communicated to the third 
party for association with the account. 

39. (Original) The method of claim 38, wherein ownership of the account by the 

account bolder is verified by the third party before associating the public key with 
the account. 

40. (Original) The method of claim 2, wherein the third party maintains one of the accounts 

for a sender of a particular one of the electronic communications. 

41 . (Original) The method of claim 40, wherein the particular electronic communication is 

transmitted to the third party directly from the sender. 

42. (Original) The method of claim 40, wherein the particular electronic communication is 

transmitted to the third party from an intermediate party. 
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43. (Original) The method of claim 40, wherein a message of a particular one of the 

electronic communications represents an instruction from the sender. 

44. (Original) The method of claim 43, further comprising executing the instruction upon 

successful authentication of the message associated with the particular electronic 
communication, 

45. (Original) The method of claim 44, wherein said step of executing the instruction is 

performed by the third party. 

46. (Original) The method of claim 43, wherein the instruction is an instruction on the 

account of the sender, 

47. (Original) The method of claim 46, wherein the account instruction is executed upon 

successful authentication of the message. 

48. (Original) The method of claim 47, wherein execution of the instruction is performed 

based solely on the successful authentication of the electronic message. 

49. (Original) The method of claim 47, wherein execution of the instruction comprises 

communicating a balance of the account. 

50. (Original) The method of claim 47, wherein execution of the instruction comprises 

debiting the account by a specified amount. 

51. (Original) The method of claim 47, wherein execution of the instruction comprises 

crediting the account by a specified amount 
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52. (Original) The method of claim 47, wherein execution of the instruction comprises 

transferring funds to another account. 

53. (Original) The method of claim 47, wherein execution of the instruction comprises 

granting access to a database. 

54. (Original) The method of claim 47, wherein execution of the instruction comprises 

granting access to a physical location such as a room, building, parking deck, and 
web site. 

55. (Original) The method of claim 47, wherein execution of the instruction comprises 

granting access to a data transmission such as pay per view, music download, and 
web broadcast. 

56. (Original) The method of claim 47, wherein execution of the instruction comprises 

providing a product. 

57. (Original) The method of claim 47, wherein execution of the instruction comprises 

providing a service. 

58. (Original) The method of claim 47, wherein execution of the instruction comprises 

making a monetary payment from the account, 

59. (Origina]) The method of claim 47, wherein execution of the instruction comprises 

transferring something of monetary value from the account. 

60. (Original) The method of claim 47, wherein execution of the instruction comprises 

transferring a security from the account. 
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61. (Original) The method of claim 47, wherein execution of the instruction comprises 

authorizing a charge to the account. 

62. (Original) The method of claim 47, wherein execution of the instruction comprises 

transferring information from the account 

63. (Original) The method of claim 2,wherein an electronic communication is 

transmitted over an open and insecure communications medium. 

64. (Original) The method of claim 63, wherein the communications medium comprises 
the Internet. 

65 . (Original) The method of claim 63, wherein the electronic communication is not 

encrypted* 

66. (Original) The method of claim 63, wherein the electronic communication includes no 

personal information regarding an entity for which the account is maintained. 

67. (Original) The method of claim 63, wherein the electronic communication includes 

no account-identifying information other than the unique identifier of the account. 

68. (Withdrawn) A method of making a financial payment by a first party to a second 

party on an account of the first party maintained by a third party, 
information pertaining to the account of the first party being retrievable from a 
database of the third party based on a unique identifier for that account, the method 
comprising the steps of; 
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(a) associating by the third party a public key of a public-private key pair 
with the unique account identifier; 

(b) digitally signing by the first party a message including an instruction to 
make payment to the second party on the account of the first party, the digital 
signature being generated with a public key of the public-private key pair; 

(c) communicating by the first party the message and digital signature in a 
first electronic communication to the second party; 

(d) communicating by the second party the message and digital signature in a 
second electronic communication to the third party; and 

(e) upon receipt of the second electronic communication from the second 
party, performing by the third party entity authentication with respect to the 
first party, the entity authentication consisting of solely conducting message 
authentication using only said generated digital signature and the public key 
associated with the unique account identifier of the first party. 

69. (Withdrawn) The method of claim 68, wherein the first and second electronic 

communications each includes the unique account identifier of the first party, and 
wherein the third party utilizes the unique account identifier received in the second 
electronic communication to retrieve the public key of the first party for 
authenticating the message of the second electronic communication. 

70. (Withdrawn) The method of claim 68, wherein the unique account identifier of the first 

party comprises the public key of the first party. 
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71. (Withdrawn) The method of claim 68, wherein the public key of the first party is 

included in the first electronic communication. 

72. (Withdrawn) The method of claim 71, wherein the public key of the first party is 

included in the second electronic communication. 

73. (Withdrawn) The method of claim 72, wherein the second electronic communication 
includes a digital signature of the second party for a message of the second party, 

74. (Withdrawn) The method of claim 73, wherein the message of the second party 

comprises instructions for making payment to the second party from the account of 
the first party maintained by the third party. 

75. (Withdrawn) The method of claim 73, wherein the second electronic communication 

includes a public key of the second party that may be used to decrypt the digital 
signature. 

76. (Withdrawn) The method of claim 68, wherein the third party makes payment to the 

second party on the account of the first party upon successful message authentication. 

77. (Withdrawn) The method of claim 68, wherein the third party communicates an 

electronic communication to the second party authorizing the instructed payment to 
the second party on the account of the first party. 

78. (Withdrawn) The method of claim 68, wherein the second party provides a service for 

the first party upon the learning of a successful authentication of the message by the 
third party. 
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79. (Withdrawn) The method of claim 68, wherein the second party provides a product 

to the first party upon the learning of a successful authentication of the message by the 
third party. 

80. (Withdrawn) The method of claim 68, wherein the message includes an additional 

instruction. 

81. (Withdrawn) The method of claim 80, wherein the second party executes the 

additional instruction upon successful execution by the third party of the 
instruction. 

82. (Withdrawn) The method of claim 81, wherein the instruction executed by the third 

party comprises payment to an account of the intermediate party. 

83. (Withdrawn) The method of claim 82 s wherein the additional instruction is sent in 

another electronic communication from the first party to the second party. 

84. (Withdrawn) The method of claim 82, wherein the additional instruction is included 

in the electronic communication sent from the first party to the second party. 

85. (Withdrawn) The method of claim 84, wherein the additional instruction is removed 

by the second party from the electronic communication and wherein the electronic 
communication is then forwarded by the second party to the third party. 

86. (Withdrawn) The method of claim 68, wherein the third party is a financial institution. 

87. (Withdrawn) The method of claim 68, wherein the second party is a merchant. 
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